Verify a real credential in your browser

Trust layer for humans + AI

One wallet for every credential. One API to verify anyone. And a new way to let AI act for you, with limits you set and can revoke in seconds.

See the live demo
W3C VC OpenID4VP SD-JWT USDT · USDC eIDAS / EUDI
Built on open standards W3C VC 2.0 OpenID4VCI / VP SD-JWT VC ISO 18013-5 mDoc IETF Status List eIDAS 2.0 / EUDI

The convergence

Three shifts. One missing layer.

Reusable identity, programmable money, and AI that acts on your behalf are all arriving at once, and they all need the same thing.

You re-prove yourself constantly

Every bank, exchange, marketplace and platform asks for the same documents. No portability, and your data is copied everywhere.

Agents now do real economic work

AI agents book, buy and sign on your behalf. But no merchant can tell whether a human actually authorized a specific action.

Money moved to programmable rails

Stablecoins settle real commerce now, yet lack the authorization layer that card networks have taken for granted for decades.

These look like three problems. They're one, a missing trust layer. Nox builds it.

What Nox is

Three products. One trust substrate.

Consumer · open source

Nox Wallet

Hold every credential, ID, KYC, age, eligibility, and reveal only what each verifier needs, nothing more.

Selective disclosurePredicate proofsHardware-bound keys
Business · the verifier

Nox Platform

Verify a human, or an agent, in one API call. A 30-minute integration and an eight-check pipeline.

Verifier ServiceTrust ResolverCompliance
Agentic · live

VDACs

Issue scoped, revocable authority to AI agents, verified through the very same endpoint as a normal credential.

Spend capsStep-up approvalSub-agent chains

The trust layer

Trust that travels with the holder, not the platform.

Nox is a neutral substrate between wallets, issuers, merchants, agents, and regulators, resolving privacy against auditability without central custody.

  • Off-chain by default: statutory data stays encrypted on the device, under the holder's keys.
  • Verifiable mandates: humans and businesses delegate to agents with machine-enforceable limits.
  • Risk oracles, not gatekeepers: ecosystem partners inform policy; Nox owns no list.
Nox trust layer, stacked translucent layers with metallic value rails on white

For people

Carry your credentials. Reveal only what's asked.

Your identity lives in one place, under your control, and proves facts about you without handing over the data behind them.

  • Receive credentials from governments, banks and employers over OpenID4VCI.
  • Prove a fact without the data behind it, “Over 18 ✓” discloses no date of birth.
  • Keys stay in the Secure Enclave / StrongBox; recovery is non-custodial by default.
  • See, and revoke, everywhere your identity has been used.
Proof of Age requested
nightclub.example · wants to confirm you're over 18
Over 18age_equal_or_over: 18
Shared ✓
Date of birthbirthdate
Full namegiven_name · family_name
Document numberdocument_number
openid4vp:// · SD-JWT VC selective disclosure · one boolean leaves your device

The wallet

What you can do with Nox.

Everyday moments, proving age, holding your credentials, and handing bounded authority to an AI agent.

9:41
· verification
The Vault Bar wants to confirm
Proof of age, choose exactly what to share.
Over 18age_over_18
Shared ✓
Date of birthbirthdate
Hidden
Namegiven · family
Hidden
Share with Face ID

Prove you're over 18

Share one signed “yes”, never your birthday, name, or document.

9:41
· wallet
4
Active
1
Expiring
5
Total
California DMV ✓● ACTIVE
Driver License
Government · mDoc
VERIFIED · nox
Bank KYCCoastal Credit Union
Tier 3
EmploymentAcme Inc.
Expiring

Every credential, one wallet

Government ID, bank KYC, age and employment, issued to you, held by you.

9:41
Travel Concierge
Approve this purchase?
Hotel · Booking.com, over your $1,000 step-up.
Spent this trip612 / 3,000 USDC
This chargebooking.com
1,200 USDC
Scopeapproved travel sites
In bounds
Approve with Face ID

Delegate to an AI agent

Hand it a budget it can't exceed, with step-up approval and instant revoke.

For developers

Verify anyone in one API call.

Integrate once and accept credentials from the Nox wallet and every federated trust source, with no bilateral deals to negotiate.

  • One endpoint for human credentials and agent VDAC chains.
  • Federated trust: EU Trusted Lists, OpenID Federation, EBSI, mDoc PKI.
  • Selective disclosure, status checks and optional sanctions / PEP screening built in.
POST https://verifier.nox.id/v1/present/requests
# ask a holder to prove they're over 18, nothing else
curl -X POST https://verifier.nox.id/v1/present/requests \
  -H 'content-type: application/json' \
  -d '{ "requestedClaims": ["age_equal_or_over:18"] }'

# → a signed OpenID4VP request the wallet answers
{
  "requestId": "req_7f3a…c21",
  "openid4vp": "openid4vp://?client_id=verifier.nox.id…",
  "status":    "pending"
}

The privacy model

Privacy by default. Compliance by choice.

You hold the data. You choose how much to reveal, per interaction, never all-or-nothing.

Default

Lightweight signal

Share a derived fact and nothing more. Zero-knowledge predicate where the format supports it.

age_over_18: true
sanctions_clear: true
When required

Step-up disclosure

A regulated counterparty legally needs more. You approve, field by field, with Face ID.

Reveal full name + DOB for AML reporting? Approve ✓
Your choice

Full disclosure

Opening an account or applying for credit? Share complete KYC, proactively and once.

Present full Nox ID · all verified claims

The data is already in your wallet. The default reveals nothing,you decide the rest.

For your AI agents

Your agents prove exactly what you allowed.

A VDAC is a credential you sign for an AI agent: what it may do, where, up to how much, and for how long, verified by any merchant before they honor it.

Travel Concierge
Awaiting delegation
Spent this trip0 / 3,000 USDC
Flight · Kayak
612 USDC · under step-up
·
Hotel · Booking.com
1,200 USDC · over step-up
·
Approve 1,200 USDC with Face ID
1
You delegate
Sign a VDAC: 3,000 USDC across approved travel sites, step-up over 1,000, valid 7 days.
2
Agent books a flight
612 USDC on Kayak, under your threshold, so it settles instantly.
3
Agent tries a hotel
1,200 USDC on Booking.com, over the step-up. The merchant sees awaiting approval.
4
You approve & it settles
One Face ID tap. The merchant settles, and every step is cryptographically auditable.
Tap a step, or watch it play

Agents that recruit agents without losing control.

Procurement agentroot VDAC · delegated by you500 / mo
Sourcingsub-agent200 / mo
Paymentsub-agent200 / mo
Notarizationsub-agent50 / mo
  • Authority only narrows down the chain, a sub-agent can never exceed its parent (200 + 200 + 50 ≤ 500).
  • The verifier walks the whole chain at the moment of action.
  • Revoke any link and its entire subtree dies at once, you govern a tree you never had to enumerate.

Neutral by design

Built on open standards. Owned by no one.

Nox is infrastructure, not a walled garden. Any issuer, verifier, holder or agent can plug in, with no lock-in.

No gatekeeper list

The Trust Resolver federates the trust roots that already exist. Nox never becomes the one list everyone must be on.

No favored rail

Stablecoins and chains are treated equally. Nox authorizes; the counterparty settles on whatever rail it prefers.

Open wallet & SDKs

The wallet, agent SDK and client libraries are open source, inspect, fork, or self-host the parts that touch your keys.

Proven team

Built by the team behind Identomat.

Nox is built by the people who shipped regulated identity infrastructure that banks and fintechs run in production today.

FinCrimeTech50 2026 Leading KYC Vendor · Liminal SOC 2 Type II iBeta Level 2 GDPR · eIDAS
150+
Organizations
22
Countries
100M+
Verifications processed

Get started

Wherever you sit in the trust chain.

Trust, made portable.

Join the waitlist for the wallet, or try a live verification in your browser today.

See the demo